By Maria Larson 

Copy Editor

State and federal officials are investigating a coordinated cyberattack that targeted more than 30 community water systems across Minnesota late Sunday and early Monday. 

According to Minnesota IT Services (MNIT), the attack affected operational technology used by local water utilities. Officials said some communities experienced disruptions to automated control systems and cellular communications, although the impact varied by location. Plymouth, Maple Plain, South St. Paul and Braham have publicly confirmed they were affected. 

Officials said there has been no impact on drinking water quality, and no communities have advised residents to change their water usage. Water utilities have continued operating while response teams assess affected systems and work to restore normal operations where needed. 

MNIT said it is coordinating the response with the Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency, the U.S. Environmental Protection Agency, the Minnesota Department of Health and other state and federal partners. Officials have not publicly identified who was responsible for the attack, and the investigation remains ongoing. 

The incident is one of the largest publicly reported coordinated cyberattacks to affect Minnesota water utilities. Water systems are part of the nation’s critical infrastructure, providing safe drinking water and supporting essential services that communities rely on every day. While officials said the public water supply remains safe, the attack highlights the importance of protecting the digital systems that help operate critical infrastructure. 

As utilities continue adopting connected technologies and automated control systems, cybersecurity has become an increasingly important part of maintaining reliable public services. Officials are working to determine how the attack occurred, whether additional communities were affected, and what steps can be taken to strengthen the security of Minnesota’s water infrastructure against future cyber threats.